CVE & CISA-KEV Catalog

CVE-2021-47378

CRITICAL
9.8
CVSS v3
NVD

Description

In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: destroy cm id before destroy qp to avoid use after free We should always destroy cm_id before destroy qp to avoid to get cma event after qp was destroyed, which may lead to use after free. In RDMA connection establishment error flow, don't destroy qp in cm event handler.Just report cm_error to upper level, qp will be destroy in nvme_rdma_alloc_queue() after destroy cm id.

How to fix

Remediation Available
linuxDebian
Fixed in:5.10.70-1CVE-2021-47378
Fixed in:5.14.9-1CVE-2021-47378
Fixed in:5.14.9-1CVE-2021-47378
Fixed in:5.14.9-1CVE-2021-47378
bpftoolRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
bpftoolRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
bpftool-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
bpftool-debuginfoRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernelRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernelRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-abi-stablelistsRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-abi-stablelistsRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-coreRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-coreRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debugRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debugRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debug-coreRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debug-coreRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debug-debuginfoRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debug-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debug-develRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debug-develRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debug-modulesRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debug-modulesRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debug-modules-extraRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debug-modules-extraRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debuginfoRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debuginfo-common-aarch64Red Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debuginfo-common-aarch64Rocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debuginfo-common-ppc64leRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debuginfo-common-ppc64leRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debuginfo-common-s390xRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debuginfo-common-s390xRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debuginfo-common-x86_64Rocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-debuginfo-common-x86_64Red Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-develRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-develRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-docRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-docRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-modulesRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-modulesRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-modules-extraRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-modules-extraRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-toolsRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-toolsRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-tools-debuginfoRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-tools-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-tools-libsRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-tools-libsRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-zfcpdumpRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-zfcpdumpRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-zfcpdump-coreRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-zfcpdump-coreRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-zfcpdump-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-zfcpdump-debuginfoRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-zfcpdump-develRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-zfcpdump-develRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-zfcpdump-modulesRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-zfcpdump-modulesRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-zfcpdump-modules-extraRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
kernel-zfcpdump-modules-extraRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
perfRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
perfRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
perf-debuginfoRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
perf-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
python3-perfRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
python3-perfRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
python3-perf-debuginfoRocky
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
python3-perf-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297
Fixed in:0:4.18.0-372.121.1.el8_6RHSA-2024:6297

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploit Intelligence

1.17%probability of exploitation in 30 days
63rdpercentile

Moderate risk: more likely to be exploited than 63% of all known CVEs.

References

Related Vulnerabilities

Other CWE-416 (Use After Free) vulnerabilities, ordered by exploit likelihood. View all

CVESeverityCVSSEPSSExploitedFix
CVE-2019-0708Critical9.8100%KEV + Ransom-
CVE-2021-31166Critical9.8100%KEVFix
CVE-2015-5119Critical9.899%KEV-
CVE-2010-3962High8.197%KEV-
CVE-2015-0313Critical9.896%KEVFix
CVE-2017-9798High7.595%-Fix
Embed a live status badge for CVE-2021-47378
CVE-2021-47378 severity badge

Markdown

[![CVE-2021-47378](https://tridentstack.com/cve/badge/CVE-2021-47378.svg)](https://tridentstack.com/cve/CVE-2021-47378)

HTML

<a href="https://tridentstack.com/cve/CVE-2021-47378"><img src="https://tridentstack.com/cve/badge/CVE-2021-47378.svg" alt="CVE-2021-47378"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-04-02.